v0.117.0: consuming-namespace NAS verification + deploy-view truth (RCA fixes 2+4)

statfs fsclass helper (network/autofs/stub/unknown, fail-open); probe not_network_fs
assertion (stub can never verify — red-proven); deploy-time stub refusal (idle autofs
proceeds — red-proven); distinct stub badge, stub wins over unreachable (unreachable line
byte-identical); deployed select shows stored HDD_PATH (red-proven vs IsDefault-only).
MinAgent unchanged 0.81.0. Gates green.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

controller/internal/web/netprobe_linux.go

@@ -9,8 +9,16 @@ import (
 	"strings"
 	"syscall"
 	"time"
+
+	"gitea.dooplex.hu/admin/felhom-controller/internal/system"
 )
 
+// platformNetProbeFSClass is the real namespace classifier (statfs f_type) the probe child runs.
+// Unbounded on purpose: the child's whole run is already bounded by the parent's netProbeTimeout.
+func platformNetProbeFSClass(dir string) string {
+	return system.ClassifyPathFS(dir)
+}
+
 // netProbeTimeout bounds one probe run (LAN write+readback is sub-second; a wedged share must not
 // hold the orchestrator — the NFS soft/retry=0 options error out well inside this).
 const netProbeTimeout = 30 * time.Second